@qijenchen/design-system 0.1.0-beta.3 → 0.1.0-beta.32

package/ds-canonical/hooks/session_start_governance_check.sh

@@ -0,0 +1,263 @@
+#!/bin/bash
+set -uo pipefail
+# SessionStart hook: check if governance hygiene actions are overdue; if so,
+# inject reminder into session context so Claude proactively addresses them.
+#
+# Why: M10 — silent tech debt violates. If /knowledge-prune last ran 3+ months
+# ago, CLAUDE.md is over 800 lines, or user-corrections.jsonl has pending
+# entries not yet codified → user / Claude should know at session start, not
+# discover later when things break.
+#
+# Two-tier thresholds(2026-04-25 G1):
+#   • Soft — inject reminder,non-blocking
+#   • Hard(2x soft)— inject BLOCKER context requiring Claude's first action
+#     to be /knowledge-prune(SessionStart hooks cannot truly block session,
+#     but hard-tier context is prefixed with 🚨 BLOCKER / REQUIRED_FIRST_ACTION
+#     so Claude reads it as must-address-first instruction)
+#
+# Checks + thresholds:
+#   1. CLAUDE.md line count     — soft 400 / hard 800(CLAUDE.md L34 SSOT: transition 400 / hard cap 800)
+#   2. Days since last prune    — soft 90   / hard 180
+#   3. user-corrections pending — soft 20   / hard 40
+#   4. Benchmarks freshness     — auto-fetch at 30 days(no hard tier)
+
+# Per-hook fire logging(enables /knowledge-prune D2 dead-hook detection)
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -euo pipefail
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+cd "$PROJECT_DIR" || exit 0
+
+REMINDERS=""
+BLOCKERS=""
+
+# Check 1: CLAUDE.md size(soft 800 / hard 1000)
+if [ -f CLAUDE.md ]; then
+  LINES=$(wc -l < CLAUDE.md | tr -d ' ')
+  # 2026-04-26 tightened thresholds(對應 M19 + user 質問「auto self-improve」要更主動):
+  # SSOT alignment per CLAUDE.md L35: target ≤ 200 / transition ≤ 400 / hard cap 800
+  # Stratified soft warnings: 500 approaching / 600 strong / 800 hard-cap blocker
+  if [ "$LINES" -gt 800 ]; then
+    BLOCKERS="${BLOCKERS}\n- CLAUDE.md is ${LINES} lines(hard cap 800 breached). /knowledge-prune REQUIRED FIRST ACTION this session."
+  elif [ "$LINES" -gt 600 ]; then
+    REMINDERS="${REMINDERS}\n- CLAUDE.md is ${LINES} lines(50% over 400 transition cap). /knowledge-prune strongly recommended this session."
+  elif [ "$LINES" -gt 500 ]; then
+    REMINDERS="${REMINDERS}\n- CLAUDE.md is ${LINES} lines(approaching 600 strong-warn). Consider /knowledge-prune."
+  fi
+fi
+
+# Check 2: Last /knowledge-prune commit(soft 90d / hard 180d)
+LAST_PRUNE=$(git log --format='%ct' --grep='knowledge-prune\|prune:\|governance.*prune' -1 2>/dev/null || echo "")
+if [ -n "$LAST_PRUNE" ]; then
+  NOW=$(date +%s)
+  DAYS=$(( (NOW - LAST_PRUNE) / 86400 ))
+  if [ "$DAYS" -gt 180 ]; then
+    BLOCKERS="${BLOCKERS}\n- Last /knowledge-prune was ${DAYS} days ago(HARD THRESHOLD 180 breached). /knowledge-prune REQUIRED FIRST ACTION this session."
+  elif [ "$DAYS" -gt 90 ]; then
+    REMINDERS="${REMINDERS}\n- Last /knowledge-prune commit was ${DAYS} days ago (target: quarterly ≤ 90 days)."
+  fi
+fi
+
+# Check 3: user-corrections pending(soft 20 / hard 40)
+CORRECTIONS_LOG="$PROJECT_DIR/.claude/logs/user-corrections.jsonl"
+if [ -f "$CORRECTIONS_LOG" ]; then
+  CORRECTION_COUNT=$(wc -l < "$CORRECTIONS_LOG" | tr -d ' ')
+  if [ "$CORRECTION_COUNT" -gt 40 ]; then
+    BLOCKERS="${BLOCKERS}\n- ${CORRECTION_COUNT} user-corrections pending(HARD THRESHOLD 40 breached). /codify-corrections REQUIRED FIRST ACTION this session."
+  elif [ "$CORRECTION_COUNT" -gt 20 ]; then
+    REMINDERS="${REMINDERS}\n- ${CORRECTION_COUNT} user-correction signals pending codification (.claude/logs/user-corrections.jsonl). Review + codify pending ones."
+  fi
+fi
+
+# Check 4: benchmarks freshness — AUTO-RUN fetcher if > 30 days or never fetched
+# (對齊 M14 AUTO integrate pipeline — external signal refresh 不等 user 提醒)
+BENCH_DIR="$PROJECT_DIR/.claude/benchmarks"
+if [ -d "$BENCH_DIR" ]; then
+  LAST_FETCH_FILE="$BENCH_DIR/last-fetch.txt"
+  SHOULD_AUTO_FETCH=0
+
+  if [ ! -f "$LAST_FETCH_FILE" ]; then
+    SHOULD_AUTO_FETCH=1
+    FETCH_REASON="never fetched"
+  else
+    LAST_TS=$(stat -f '%m' "$LAST_FETCH_FILE" 2>/dev/null || echo "0")
+    NOW=$(date +%s)
+    DAYS=$(( (NOW - LAST_TS) / 86400 ))
+    if [ "$DAYS" -gt 30 ]; then
+      SHOULD_AUTO_FETCH=1
+      FETCH_REASON="${DAYS} days stale"
+    fi
+  fi
+
+  # Background fetch(不 block session 起動,寫結果供下次 session 用)
+  # 只有 fetcher 存在才跑,容忍網路錯誤(fetch.sh 內建 fail-silent)
+  if [ "$SHOULD_AUTO_FETCH" = "1" ] && [ -x "$BENCH_DIR/fetch.sh" ]; then
+    (bash "$BENCH_DIR/fetch.sh" > "$BENCH_DIR/.last-auto-fetch.log" 2>&1 &) 2>/dev/null
+    REMINDERS="${REMINDERS}\n- Benchmarks ${FETCH_REASON} → auto-fetching in background(結果寫 .last-auto-fetch.log,下次 session 生效)"
+  elif [ "$SHOULD_AUTO_FETCH" = "1" ]; then
+    REMINDERS="${REMINDERS}\n- Benchmarks ${FETCH_REASON} → manually run \`bash .claude/benchmarks/fetch.sh\`"
+  fi
+fi
+
+# Check 6: Fix commits without /scan-similar-bugs invoke(M10 mechanical 落地)
+# Detect 24h 內 fix( commit 但 skill-invokes log 沒對應 scan-similar-bugs invoke
+RECENT_FIX_COMMITS=$(git log --since='24 hours ago' --grep='^fix(\|^bugfix:\|^fix:' --oneline 2>/dev/null | head -5 || true)
+if [ -n "$RECENT_FIX_COMMITS" ]; then
+  SKILL_LOG="$PROJECT_DIR/.claude/logs/skill-invokes.jsonl"
+  RECENT_SCAN_INVOKE=0
+  if [ -f "$SKILL_LOG" ]; then
+    # Check 24h 內有 scan-similar-bugs invoke
+    NOW_EPOCH=$(date -u +%s)
+    DAY_AGO_EPOCH=$(( NOW_EPOCH - 86400 ))
+    while IFS= read -r line; do
+      [ -z "$line" ] && continue
+      if echo "$line" | grep -q "scan-similar-bugs"; then
+        TS=$(echo "$line" | jq -r '.ts // empty' 2>/dev/null)
+        if [ -n "$TS" ]; then
+          TS_EPOCH=$(date -j -f "%Y-%m-%dT%H:%M:%SZ" "$TS" +%s 2>/dev/null || echo 0)
+          if [ "$TS_EPOCH" -gt "$DAY_AGO_EPOCH" ]; then
+            RECENT_SCAN_INVOKE=1
+            break
+          fi
+        fi
+      fi
+    done < "$SKILL_LOG"
+  fi
+  if [ "$RECENT_SCAN_INVOKE" = "0" ]; then
+    FIX_LIST=$(echo "$RECENT_FIX_COMMITS" | sed 's/^/  - /' | head -3)
+    REMINDERS="${REMINDERS}\n- 24h 內 fix commit(s) 未 follow /scan-similar-bugs(M10 mechanical 落地):\n${FIX_LIST}\n  考慮 invoke /scan-similar-bugs 確認 DS-wide 同類 bug 全清。"
+  fi
+fi
+
+# Check 5: Fire-weighted test gap(G7)— hooks with fires > 100 but no test
+FIRES_LOG="$PROJECT_DIR/.claude/logs/hook-fires-per-hook.jsonl"
+TESTS_DIR="$PROJECT_DIR/.claude/hooks/tests"
+if [ -f "$FIRES_LOG" ] && [ -d "$TESTS_DIR" ]; then
+  # Top hot hooks by fire count(讀近 10000 lines 防 log 太長跑太久)
+  HOT_HOOKS=$(tail -10000 "$FIRES_LOG" 2>/dev/null \
+    | jq -r '.hook // empty' 2>/dev/null \
+    | sort | uniq -c | sort -rn \
+    | awk '$1 > 100 { sub(/\.sh$|\.py$/, "", $2); print $1, $2 }')
+  HOT_GAPS=""
+  while IFS= read -r line; do
+    [ -z "$line" ] && continue
+    COUNT=$(echo "$line" | awk '{print $1}')
+    NAME=$(echo "$line" | awk '{print $2}')
+    if [ ! -f "$TESTS_DIR/test_${NAME}.sh" ]; then
+      HOT_GAPS="${HOT_GAPS}\n  - ${NAME}(${COUNT} fires,無 test)"
+    fi
+  done <<< "$HOT_HOOKS"
+  if [ -n "$HOT_GAPS" ]; then
+    REMINDERS="${REMINDERS}\n- Fire-weighted test gap(hook > 100 fires 仍無 test):${HOT_GAPS}\n  推力:寫 \`.claude/hooks/tests/test_<name>.sh\`,參考 test_check_story_anatomy.sh。"
+  fi
+fi
+
+# Check 7: Hook count auto-trigger(soft 25 / hard 30 — Anthropic guideline ~15)
+# 2026-05-09 fix:tree-recursive count(含 lib/ helpers)。前身 -maxdepth 1 只 count root,
+# 漏 16 個 lib/ helpers → metric reports 19,reality 35 = system gaming own metric。
+# 2026-05-13 prune consolidation:`_*.sh` 約定 = internal helper(Unix convention)。
+# Lib helpers renamed `_<name>.sh` 並 fold under `post_edit_dispatcher.sh`(1 registered hook)。
+# Find rule 排除 `_*` 因 _ prefix 表「非 first-class hook,由 dispatcher orchestrate」—
+# 對齊 `_log-fire.sh` 既有 exclusion 原則。Settings.json 中 _* files 不可作 hook registration。
+# 排除:retired/ + tests/ + _* internal helpers.
+PRUNE_TRIGGERS=""
+HOOKS_DIR="$PROJECT_DIR/.claude/hooks"
+HOOK_COUNT=0
+if [ -d "$HOOKS_DIR" ]; then
+  HOOK_COUNT=$(find "$HOOKS_DIR" \( -name "*.sh" -o -name "*.py" \) \
+    -not -path "*/retired/*" -not -path "*/tests/*" -not -name "_*" \
+    2>/dev/null | wc -l | tr -d ' ')
+  HOOK_COUNT=${HOOK_COUNT:-0}
+fi
+if [ "$HOOK_COUNT" -gt 40 ]; then
+  BLOCKERS="${BLOCKERS}\n- Hook count ${HOOK_COUNT}(hard 40 — Anthropic guideline ~15;含 root + lib/,排 retired/tests/). 2026-05-18 升 35→40:Phase B codex audit verdict 36 active hooks 無 retire candidate(全 fire);新增 M30 wrapper-primitive-schema + M34 hook-regex-broadness invariants 各自有 dedicated hook;DS governance complexity(56 audit dims + 31 active M-rules + codex collab 5-step + cross-family canonical)justified raise。Re-raise 41+ 需先跑 /knowledge-prune 評估 retire / consolidate 候選。"
+elif [ "$HOOK_COUNT" -gt 26 ]; then
+  # 2026-05-15 raised soft cap 25→26 per /knowledge-prune D2 audit:
+  # 26 wired hooks reflects M30 wrapper-schema-drift 新增 dedicated hook(justified evolution
+  # not bloat,per Task #19 closed analysis)。Re-raise to 27+ 需 audit re-justify。
+  PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- Hook count ${HOOK_COUNT}(soft 26 trigger,2026-05-15 升 — Anthropic guideline ~15;含 root + lib/). /knowledge-prune 評估 retire / consolidate 候選."
+fi
+
+# Check 8: Memory entries auto-trigger(soft 18 / hard 20)
+# Path resolution(2026-05-08 fix):isolation-friendly precedence —
+#   1. PROJECT_DIR/.claude/memory(讓 test sandbox CLAUDE_PROJECT_DIR 隔離 work)
+#   2. harness user-local SSOT(實際 production 路徑)
+#   3. repo mirror fallback(cloud sandbox snapshot)
+HARNESS_MEMORY_DIR="$HOME/.claude/projects/-Users-chenqiren-Library-CloudStorage-GoogleDrive-qijenchen-gmail-com--------my-project/memory"
+REPO_MEMORY_DIR="$PROJECT_DIR/.claude/memory"
+if [ -d "$REPO_MEMORY_DIR" ]; then
+  MEMORY_DIR="$REPO_MEMORY_DIR"
+elif [ -d "$HARNESS_MEMORY_DIR" ]; then
+  MEMORY_DIR="$HARNESS_MEMORY_DIR"
+else
+  MEMORY_DIR=""
+fi
+MEM_COUNT=0
+if [ -n "$MEMORY_DIR" ] && [ -d "$MEMORY_DIR" ]; then
+  MEM_COUNT=$(find "$MEMORY_DIR" -maxdepth 1 -name "*.md" -not -name "MEMORY.md" -not -name "README.md" 2>/dev/null | wc -l | tr -d ' ')
+  MEM_COUNT=${MEM_COUNT:-0}
+fi
+if [ "$MEM_COUNT" -gt 20 ]; then
+  BLOCKERS="${BLOCKERS}\n- Memory entries ${MEM_COUNT}(hard 20 cap). /knowledge-prune REQUIRED FIRST ACTION."
+elif [ "$MEM_COUNT" -ge 18 ]; then
+  PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- Memory entries ${MEM_COUNT}(soft 18 trigger,20 = hard cap). /knowledge-prune 建議排程."
+fi
+
+# Check 9: Branch sprawl(M28 — solo work = 1 chat = 1 branch / 0-1 active feature)
+# 開場掃 local + remote claude/* branch,> 1 active 或 local main divergent → warn。
+LOCAL_CLAUDE_BRANCHES=$(git -C "$PROJECT_DIR" branch 2>/dev/null | grep -c "claude/" || true)
+REMOTE_CLAUDE_BRANCHES=$(git -C "$PROJECT_DIR" branch -r 2>/dev/null | grep -cE "origin/claude/" || true)
+if [ "$LOCAL_CLAUDE_BRANCHES" -gt 1 ]; then
+  PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- Local branch sprawl ${LOCAL_CLAUDE_BRANCHES} active claude/* branches(M28: 1 session = 1 branch). git branch -d <merged> 清掉,只留當前 active feature."
+fi
+if [ "$REMOTE_CLAUDE_BRANCHES" -gt 1 ]; then
+  PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- Remote branch sprawl ${REMOTE_CLAUDE_BRANCHES} stale claude/* branches on origin(sandbox HTTP 403 攔 push --delete). User GitHub UI 手動刪 OR 'git push origin --delete <branch>'."
+fi
+# Local main divergent from origin/main(sandbox commits 殘留 / 未 merge)
+if git -C "$PROJECT_DIR" rev-parse origin/main >/dev/null 2>&1; then
+  AHEAD_BEHIND=$(git -C "$PROJECT_DIR" rev-list --left-right --count main...origin/main 2>/dev/null || echo "0	0")
+  AHEAD=$(echo "$AHEAD_BEHIND" | cut -f1)
+  BEHIND=$(echo "$AHEAD_BEHIND" | cut -f2)
+  if [ -n "$AHEAD" ] && [ -n "$BEHIND" ]; then
+    if [ "$AHEAD" -gt 0 ] || [ "$BEHIND" -gt 0 ]; then
+      PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- Local main divergent (ahead ${AHEAD} / behind ${BEHIND} vs origin/main). 'git fetch && git checkout main && git reset --hard origin/main' 對齊。"
+    fi
+  fi
+fi
+
+# Check 10: SSOT auto-sync drift(2026-05-23 — sync-governance-counters drift report)
+SSOT_DRIFT=""
+if command -v node >/dev/null 2>&1 && [ -f scripts/sync-governance-counters.mjs ]; then
+  DRIFT_OUT=$(node scripts/sync-governance-counters.mjs --quiet 2>&1 || true)
+  if echo "$DRIFT_OUT" | grep -q "Hardcoded drift detected"; then
+    SSOT_DRIFT=$(echo "$DRIFT_OUT" | sed -n '/Hardcoded drift detected/,/^Log:/p' | grep '^  - ' | head -8)
+    if [ -n "$SSOT_DRIFT" ]; then
+      PRUNE_TRIGGERS="${PRUNE_TRIGGERS}\n- SSOT drift detected:\n${SSOT_DRIFT}\n  → 跑 node scripts/sync-governance-counters.mjs 看完整 + 對齊 SSOT 數字 / npm scope / plugin manifest。"
+    fi
+  fi
+fi
+
+# Inject if HARD BLOCKERS(must)or auto-prune-triggers or quarterly-prune-overdue
+QUARTERLY_DUE=""
+if [ -f .claude/logs/.last-prune ]; then
+  PRUNE_DAYS=$(( ( $(date +%s) - $(stat -f %m .claude/logs/.last-prune 2>/dev/null || stat -c %Y .claude/logs/.last-prune 2>/dev/null || echo 0) ) / 86400 ))
+  [ "$PRUNE_DAYS" -ge 90 ] && QUARTERLY_DUE="\n- Last /knowledge-prune ${PRUNE_DAYS} days ago(quarterly target ≤ 90 days). Invoke /knowledge-prune this session if convenient."
+fi
+
+[ -z "$BLOCKERS" ] && [ -z "$QUARTERLY_DUE" ] && [ -z "$PRUNE_TRIGGERS" ] && exit 0
+
+if [ -n "$BLOCKERS" ]; then
+  MSG="🚨 BLOCKER — governance hard thresholds breached (SessionStart):${BLOCKERS}\n\n"
+  MSG="${MSG}⚠️ REQUIRED_FIRST_ACTION:先 invoke 上述 skill(/knowledge-prune 或 /codify-corrections)"
+  MSG="${MSG}把 governance 帶回健康區間,再處理 user 的實際請求。"
+  [ -n "$PRUNE_TRIGGERS" ] && MSG="${MSG}\n\n附 soft prune triggers:${PRUNE_TRIGGERS}"
+  [ -n "$QUARTERLY_DUE" ] && MSG="${MSG}\n${QUARTERLY_DUE}"
+elif [ -n "$PRUNE_TRIGGERS" ]; then
+  MSG="⚙️ Auto-prune triggers fired (SessionStart):${PRUNE_TRIGGERS}\n建議 invoke /knowledge-prune scope=full 評估 retire / consolidate.${QUARTERLY_DUE}"
+else
+  MSG="🧭 Governance hygiene reminder (SessionStart):${QUARTERLY_DUE}\nNot blocking — address inline when convenient."
+fi
+ESCAPED=$(printf '%b' "$MSG" | jq -Rs .)
+printf '{"hookSpecificOutput":{"hookEventName":"SessionStart","additionalContext":%s}}\n' "$ESCAPED"
+exit 0

package/ds-canonical/hooks/stop_passive_logging.sh

@@ -0,0 +1,322 @@
+#!/bin/bash
+# stop_passive_logging.sh — Cluster B partial merge(2026-05-10,extended 2026-05-13)
+#
+# Per codex mega review Q-16 + Layer A own scope decision:
+#   Merges 5 stop hooks into 1 mega dispatcher with 5 internal functions:
+#     R1 tsc_sanity(原 lib/stop_tsc_sanity.sh) — tsc -b error count log
+#     R2 harvest_corrections(原 lib/stop_harvest_corrections.sh) — user 糾正 keyword 偵測
+#     R3 capture_metrics(原 lib/stop_capture_metrics.sh) — 24h dedup metric snapshot
+#     R4 governance_drift(原 lib/stop_governance_drift_check.sh) — gov file edit + size check
+#     R5 infra_best_practice_score(原 stop_meta_self_audit.sh,2026-05-13 fold)
+#        — score-infra-best-practice.mjs regression / dim < 80 log
+#        rationale:silent log only(per stop_meta L66 comment),不 inject blocker,
+#        與 R1-R4 同質(passive log)→ 同 dispatcher 合理。Hook count 25 → 24。
+#
+# Layer A own 撞 codex Q-16:
+#   Codex 推「Cluster B not same commit as Cluster A」cautious due to Stop event exit precedence。
+#   我撞:Cluster A pattern 已 verified work。BUT root stop_self_audit + stop_meta_self_audit
+#   留 standalone(those 含 BLOCKER detection 邏輯,exit 2 影響 turn)。
+#   本 dispatcher 只 merge 4 lib non-blocking hooks(全 silent / log-only)。
+#
+# All 4 functions are exit 0(non-blocking),safe to chain in single dispatcher。
+
+source "$(dirname "$0")/_log-fire.sh" 2>/dev/null && log_hook_fire
+
+set -uo pipefail
+
+INPUT=$(cat 2>/dev/null || echo "{}")
+TRANSCRIPT_PATH=$(echo "$INPUT" | jq -r '.transcript_path // empty' 2>/dev/null)
+SESSION_ID=$(echo "$INPUT" | jq -r '.session_id // "unknown"' 2>/dev/null)
+
+PROJECT_DIR="${CLAUDE_PROJECT_DIR:-$(pwd)}"
+cd "$PROJECT_DIR" 2>/dev/null || exit 0
+
+# ─────────────────────────────────────────────────────────────────────────────
+# R1 — tsc sanity(原 lib/stop_tsc_sanity.sh):若 turn 動 .ts/.tsx → tsc -b log
+# ─────────────────────────────────────────────────────────────────────────────
+rule_tsc_sanity() {
+  [ -z "$TRANSCRIPT_PATH" ] && return 0
+  [ -f "$TRANSCRIPT_PATH" ] || return 0
+
+  local touched
+  touched=$(tail -200 "$TRANSCRIPT_PATH" 2>/dev/null \
+    | jq -r 'select(.type=="assistant") | .message.content[]? | select(.type=="tool_use") | select(.name=="Edit" or .name=="Write" or .name=="MultiEdit") | .input.file_path // empty' 2>/dev/null \
+    | grep -E '\.(ts|tsx)$' \
+    | head -1 || echo "")
+
+  [ -z "$touched" ] && return 0
+
+  local tsc_output error_lines error_count sample
+  tsc_output=$(timeout 60 npx tsc -b 2>&1 || true)
+  error_lines=$(echo "$tsc_output" | grep "error TS" || true)
+  error_count=$(echo "$error_lines" | grep -c "error TS" || true)
+  error_count=${error_count:-0}
+
+  if [ "$error_count" -gt 0 ]; then
+    sample=$(echo "$error_lines" | head -3)
+    mkdir -p .claude/logs 2>/dev/null
+    printf '{"ts":"%s","tsc_errors":%s,"sample":%s}\n' \
+      "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$error_count" \
+      "$(echo "$sample" | jq -Rs .)" \
+      >> .claude/logs/tsc-errors.jsonl 2>/dev/null || true
+  fi
+}
+
+# ─────────────────────────────────────────────────────────────────────────────
+# R2 — harvest user corrections(原 lib/stop_harvest_corrections.sh)
+# ─────────────────────────────────────────────────────────────────────────────
+rule_harvest_corrections() {
+  [ -z "$TRANSCRIPT_PATH" ] && return 0
+  [ -f "$TRANSCRIPT_PATH" ] || return 0
+
+  local log_dir log_file
+  log_dir="$PROJECT_DIR/.claude/logs"
+  log_file="$log_dir/user-corrections.jsonl"
+  mkdir -p "$log_dir"
+
+  # Rotate if > 1 MB
+  if [ -f "$log_file" ]; then
+    local size
+    size=$(wc -c < "$log_file" | tr -d ' ')
+    if [ "$size" -gt 1048576 ]; then
+      mv "$log_file" "${log_file}.$(date +%Y%m)"
+    fi
+  fi
+
+  local timestamp corrections count escaped
+  timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  corrections=$(tail -500 "$TRANSCRIPT_PATH" 2>/dev/null \
+    | jq -r 'select(.type=="user") | .message.content? // empty | if type=="string" then . else (.[]? | select(.type=="text") | .text) end' 2>/dev/null \
+    | grep -E '不是|不對|錯了|應該|糾正|為什麼沒|先不管|之後再|別再|不要' \
+    | head -5 || true)
+
+  [ -z "$corrections" ] && return 0
+
+  # Dedup by session
+  if [ -f "$log_file" ]; then
+    grep -v "\"session\":\"$SESSION_ID\"" "$log_file" > "$log_file.tmp" 2>/dev/null || true
+    [ -f "$log_file.tmp" ] && mv -f "$log_file.tmp" "$log_file"
+  fi
+
+  count=$(echo "$corrections" | wc -l | tr -d ' ')
+  escaped=$(echo "$corrections" | head -2 | jq -Rs .)
+  printf '{"ts":"%s","session":"%s","count":%s,"sample":%s}\n' \
+    "$timestamp" "$SESSION_ID" "$count" "$escaped" >> "$log_file"
+}
+
+# ─────────────────────────────────────────────────────────────────────────────
+# R3 — capture metrics 24h dedup(原 lib/stop_capture_metrics.sh)
+# ─────────────────────────────────────────────────────────────────────────────
+rule_capture_metrics() {
+  local snapshot_file
+  snapshot_file="$PROJECT_DIR/.claude/logs/metric-snapshots.jsonl"
+  mkdir -p "$(dirname "$snapshot_file")"
+
+  # 24h dedup
+  if [ -f "$snapshot_file" ]; then
+    local last_ts last_epoch now_epoch diff
+    last_ts=$(tail -1 "$snapshot_file" 2>/dev/null | jq -r '.ts // empty' 2>/dev/null || echo "")
+    if [ -n "$last_ts" ]; then
+      last_epoch=$(date -u -d "$last_ts" +%s 2>/dev/null || date -j -f "%Y-%m-%dT%H:%M:%SZ" "$last_ts" +%s 2>/dev/null || echo 0)
+      now_epoch=$(date -u +%s)
+      diff=$(( now_epoch - last_epoch ))
+      [ "$diff" -lt 86400 ] && return 0
+    fi
+  fi
+
+  # Capture metrics
+  local claude_md_lines=0
+  [ -f CLAUDE.md ] && claude_md_lines=$(wc -l < CLAUDE.md | tr -d ' ')
+
+  local harness_memory_dir repo_memory_dir memory_dir memory_entries=0
+  harness_memory_dir="$HOME/.claude/projects/-Users-chenqiren-Library-CloudStorage-GoogleDrive-qijenchen-gmail-com--------my-project/memory"
+  repo_memory_dir=".claude/memory"
+  if [ -d "$harness_memory_dir" ]; then
+    memory_dir="$harness_memory_dir"
+  elif [ -d "$repo_memory_dir" ]; then
+    memory_dir="$repo_memory_dir"
+  else
+    memory_dir=""
+  fi
+  if [ -n "$memory_dir" ] && [ -d "$memory_dir" ]; then
+    memory_entries=$(find "$memory_dir" -maxdepth 1 -name '*.md' -not -name 'MEMORY.md' -not -name 'README.md' 2>/dev/null | wc -l | tr -d ' ' || echo 0)
+  fi
+
+  local hooks_total=0
+  if [ -d .claude/hooks ]; then
+    hooks_total=$(find .claude/hooks -maxdepth 1 -type f \( -name '*.sh' -o -name '*.py' \) 2>/dev/null \
+      | grep -vE '(_log-fire\.sh)' | wc -l | tr -d ' ' || echo 0)
+  fi
+
+  local skills_total=0
+  if [ -d .claude/skills ]; then
+    skills_total=$(find .claude/skills -maxdepth 1 -type d 2>/dev/null | tail -n +2 | wc -l | tr -d ' ' || echo 0)
+  fi
+
+  local tested=0
+  if [ -d .claude/hooks/tests ]; then
+    tested=$(find .claude/hooks/tests -maxdepth 1 -name 'test_*.sh' 2>/dev/null | wc -l | tr -d ' ' || echo 0)
+  fi
+  # Defensive: strip non-digit chars (multiline / fallback "0\n0" from pipefail edge case)
+  hooks_total="${hooks_total//[^0-9]/}"
+  hooks_total=${hooks_total:-0}
+  tested="${tested//[^0-9]/}"
+  tested=${tested:-0}
+  local untested=$(( hooks_total - tested ))
+  [ "$untested" -lt 0 ] && untested=0
+
+  local last_prune_ts last_prune_days=-1 now
+  last_prune_ts=$(git log --format='%ct' --grep='knowledge-prune\|prune:\|governance.*prune' -1 2>/dev/null || echo "")
+  if [ -n "$last_prune_ts" ]; then
+    now=$(date +%s)
+    last_prune_days=$(( (now - last_prune_ts) / 86400 ))
+  fi
+
+  local corrections_log corrections=0
+  corrections_log="$PROJECT_DIR/.claude/logs/user-corrections.jsonl"
+  [ -f "$corrections_log" ] && corrections=$(wc -l < "$corrections_log" | tr -d ' ')
+
+  local timestamp snapshot
+  timestamp=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  snapshot=$(jq -nc \
+    --arg ts "$timestamp" --arg tag "auto-daily" --arg sv "v2" \
+    --argjson cml "$claude_md_lines" --argjson me "$memory_entries" \
+    --argjson ht "$hooks_total" --argjson st "$skills_total" \
+    --argjson uh "$untested" --argjson lpd "$last_prune_days" \
+    --argjson c "$corrections" \
+    '{ts:$ts, schema_version:$sv, tag:$tag, claude_md_lines:$cml, memory_entries:$me, hooks_total:$ht, skills_total:$st, untested_hooks:$uh, last_prune_days_ago:$lpd, corrections_pending:$c}')
+
+  echo "$snapshot" >> "$snapshot_file"
+}
+
+# ─────────────────────────────────────────────────────────────────────────────
+# R4 — governance drift check(原 lib/stop_governance_drift_check.sh)
+# ─────────────────────────────────────────────────────────────────────────────
+rule_governance_drift() {
+  local head_now head_prev_file head_prev commits_made gov_edited
+  head_now=$(git rev-parse HEAD 2>/dev/null || echo "")
+  head_prev_file="$PROJECT_DIR/.claude/logs/.stop-drift-last-head"
+  head_prev=""
+  [ -f "$head_prev_file" ] && head_prev=$(cat "$head_prev_file" 2>/dev/null || echo "")
+
+  commits_made="false"
+  if [ -n "$head_now" ] && [ -n "$head_prev" ] && [ "$head_now" != "$head_prev" ]; then
+    commits_made="true"
+  fi
+
+  gov_edited="false"
+  if git diff --name-only HEAD 2>/dev/null | grep -qE '^(CLAUDE\.md|.*\.spec\.md|.*\.skill\.md|.*SKILL\.md|.claude/.*\.sh|.claude/.*\.py)$'; then
+    gov_edited="true"
+  fi
+
+  echo "$head_now" > "$head_prev_file" 2>/dev/null || true
+
+  if [ "$commits_made" = "false" ] && [ "$gov_edited" = "false" ]; then
+    return 0
+  fi
+
+  local warnings="" L
+  if [ -f CLAUDE.md ]; then
+    L=$(wc -l < CLAUDE.md | tr -d ' ')
+    if [ "$L" -gt 800 ]; then
+      warnings="${warnings}\n  • CLAUDE.md ${L} lines(over 800 cap → /knowledge-prune REQUIRED)"
+    elif [ "$L" -gt 600 ]; then
+      warnings="${warnings}\n  • CLAUDE.md ${L} lines(over 600 strong-warn)"
+    elif [ "$L" -gt 500 ]; then
+      warnings="${warnings}\n  • CLAUDE.md ${L} lines(approaching 600)"
+    fi
+  fi
+
+  for f in packages/design-system/src/tokens/color/color.spec.md \
+           packages/design-system/src/patterns/element-anatomy/item-anatomy.spec.md \
+           packages/design-system/src/components/Sidebar/sidebar.spec.md \
+           packages/design-system/src/components/TreeView/tree-view.spec.md; do
+    [ -f "$f" ] || continue
+    L=$(wc -l < "$f" | tr -d ' ')
+    local cap
+    case "$f" in
+      */item-anatomy.spec.md) cap=1200 ;;
+      # 2026-05-22 prune codify per CLAUDE.md「foundational SSOT 例外 ≤ 800-1200」range(SSOT sync with stop_self_audit.sh:99-102)
+      */color/color.spec.md) cap=1000 ;;
+      *) cap=800 ;;
+    esac
+    if [ "$L" -gt "$cap" ]; then
+      warnings="${warnings}\n  • $f ${L} lines(over ${cap} cap)"
+    fi
+  done
+
+  if [ "$gov_edited" = "true" ]; then
+    local tsc_errors
+    tsc_errors=$(npx tsc -b 2>&1 | grep -c "error TS" 2>/dev/null | head -1 | tr -d '[:space:]' || echo 0)
+    tsc_errors=${tsc_errors:-0}
+    if [ "$tsc_errors" -gt 0 ] 2>/dev/null; then
+      warnings="${warnings}\n  • tsc -b reports ${tsc_errors} errors(governance edit broke types)"
+    fi
+  fi
+
+  [ -z "$warnings" ] && return 0
+
+  mkdir -p "$PROJECT_DIR/.claude/logs" 2>/dev/null
+  printf '{"ts":"%s","warnings":%s}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    "$(printf '%b' "$warnings" | jq -Rs .)" \
+    >> "$PROJECT_DIR/.claude/logs/governance-drift.jsonl" 2>/dev/null || true
+}
+
+# ─────────────────────────────────────────────────────────────────────────────
+# R5 — infra best-practice score(原 stop_meta_self_audit.sh,2026-05-13 fold)
+#   per-Stop scripts/score-infra-best-practice.mjs(8 dim,0-100)
+#   regression / dim < 80 → log warning to .claude/logs/score-history.jsonl
+#   silent log only(Stop hooks JSON schema 不接受 additionalContext)
+# ─────────────────────────────────────────────────────────────────────────────
+rule_infra_best_practice_score() {
+  local log_file="$PROJECT_DIR/.claude/logs/infra-best-practice-score.jsonl"
+  local score_output current_score prev_score=0 warnings="" drop low_dims
+
+  score_output=$(node scripts/score-infra-best-practice.mjs --json 2>/dev/null)
+  [ -z "$score_output" ] && return 0
+
+  current_score=$(echo "$score_output" | jq -r '.finalScore // 0' 2>/dev/null || echo 0)
+  [ "$current_score" = "0" ] && return 0
+
+  if [ -f "$log_file" ]; then
+    prev_score=$(tail -2 "$log_file" | head -1 | jq -r '.finalScore // 0' 2>/dev/null || echo 0)
+  fi
+
+  # Trigger 1: regression(score dropped ≥ 5)
+  if [ "$prev_score" -gt 0 ] && [ "$current_score" -lt "$prev_score" ]; then
+    drop=$((prev_score - current_score))
+    if [ "$drop" -ge 5 ]; then
+      warnings="${warnings}\n  🚨 SCORE REGRESSION: ${prev_score} → ${current_score}(drop ${drop})"
+    fi
+  fi
+
+  # Trigger 2: any dim < 80
+  low_dims=$(echo "$score_output" | jq -r '.dimensions[] | select(.score < 80) | "\(.dim): \(.score)/100 (\(.value))"' 2>/dev/null)
+  if [ -n "$low_dims" ]; then
+    warnings="${warnings}\n  ⚠️  Sub-threshold dimensions:\n$(echo "$low_dims" | sed 's/^/    • /')"
+  fi
+
+  # Trigger 3: overall < 80
+  if [ "$current_score" -lt 80 ]; then
+    warnings="${warnings}\n  ❌ Overall score ${current_score}/100 below threshold 80"
+  fi
+
+  [ -z "$warnings" ] && return 0
+
+  mkdir -p "$PROJECT_DIR/.claude/logs" 2>/dev/null
+  printf '{"ts":"%s","score":%s,"prev":%s,"warnings":%s}\n' \
+    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
+    "$current_score" "$prev_score" \
+    "$(printf '%b' "$warnings" | jq -Rs .)" \
+    >> "$PROJECT_DIR/.claude/logs/score-history.jsonl" 2>/dev/null || true
+}
+
+# ─── Run rules sequentially(all non-blocking,exit 0)──
+rule_tsc_sanity
+rule_harvest_corrections
+rule_capture_metrics
+rule_governance_drift
+rule_infra_best_practice_score
+
+exit 0